Privacy policy
Data controller
The data controller is the publisher of the site: [À compléter : nom ou raison sociale], [À compléter : adresse postale]. For any question about your data, write to [À compléter : adresse e-mail de contact].
This policy covers hylterium.com. The site shows no advertising and uses no audience measurement tool or advertising tracker.
The data we process
When you visit the site
For each request, our servers and Cloudflare record technical data: IP address, date and time, requested page, browser. It is used to run the site, protect it and limit abuse.
When you sign in with Hytale
Sign-in goes through Hytale's official account service. We receive an account identifier specific to Hylterium, along with the identifier (UUID) and name of your game profile, never your password or your email address. We also record your rank on the server, the dates you sign in to the site and your votes for the bugs to fix.
When you use a guest username
The guest username and your cart stay in your browser. Our server only checks that the username is not reserved for a verified account, without keeping it. The "Sign out" button erases them.
When you buy from the store
To create your cart, our server sends Tebex your username and your IP address, which Tebex requires to prevent fraud. Payment then takes place at Tebex, which collects your details (name, email, payment method, country) as a separate data controller, under its own privacy policy. We never have access to your bank details.
Tebex then sends us the details of each order (username, offers, amount, date and the buyer's contact details) so that we can deliver the offers, answer requests for help and handle payment disputes.
Game data shown on the site
The site shows information from the game servers:
- your username and statistics in the rankings;
- guilds, their description and their territories on the map;
- your live position on the kingdom map, only while you are online there;
- the time left before your next vote on each voting site, to anyone who enters your username.
You can object to these displays by writing to us.
When you use the icon generator
The files you send are only used to produce the icon and are not kept.
When an error occurs
If a technical error occurs, a report (page, browser, error message) may be sent to Sentry, our error tracking tool, so that we can fix it.
Summary
| Processing | Legal basis | Retention |
|---|---|---|
| Technical logs | Legitimate interest: site security | 12 months at most |
| Account linked to Hytale | Performance of the terms of use | As long as the account exists |
| Sign-in session | Performance of the terms of use | 8 hours at most |
| Guest username and cart | Performance of the terms of use | In your browser, until you sign out |
| Orders | Performance of the sales contract | Order follow-up, then legal obligations (accounting) |
| Game data shown | Legitimate interest: community life | As long as it exists in game; positions only live |
| Icon generator files | Performance of the terms of use | None: deleted after rendering |
| Error reports | Legitimate interest: keeping the site working | 90 days at most |
Cookies and local storage
The site only uses cookies and local storage that it needs to work, so they do not require your consent.
| Name | Purpose | Duration |
|---|---|---|
__Host-hylterium_session | Keeps you signed in | 8 hours |
__Host-hylterium_hytale_flow | Secures the Hytale sign-in | 10 minutes |
hylterium-locale | Remembers the chosen language | 1 year |
hylterium.store.* (local storage) | Remembers your username and cart | Until you sign out |
Cloudflare may set a technical cookie to tell visitors from bots. YouTube videos only load if you click them, from youtube-nocookie.com. Tebex's payment window sets its own cookies, described in its privacy policy.
Recipients
Your data is never sold or rented. Only authorised members of the Hylterium team and our service providers have access to it, for what they need:
| Provider | Role | Location |
|---|---|---|
| OVHcloud | Site hosting | Servers in Canada |
| Cloudflare | Network and site protection | US company, global network |
| DigitalOcean | Game server database | US company |
| Sentry | Error tracking | US company |
Tebex (payments) and Hypixel Studios (Hytale sign-in) process your data as separate controllers, under their own policies.
Some data is therefore processed outside the European Union: in Canada and the United Kingdom, which the European Commission recognises as providing adequate protection, and by US companies, under the Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You can ask to access, correct or erase your data, restrict its use, object to its processing, or receive it in a readable format (portability). Write to [À compléter : adresse e-mail de contact] or open a ticket on the Hylterium Discord: we answer within one month. We may ask you to prove that the account concerned is yours.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority.
Security
The site is only served over HTTPS. The session cookie cannot be read by the page's scripts, and we only keep a fingerprint of each session, never the session itself. Staff tools are restricted to authorised accounts.
Changes
We update this policy when our processing changes. The date of the last update appears at the top of the page.